Advanced Features

Sandbox and approvals

The sandbox constrains filesystem and network behavior. Approval review handles actions that exceed the current policy. Treat the two as complementary controls rather than substitutes.

sandbox: workspace-write
network: restricted
approvals: on-request

Git worktrees

Worktrees isolate branch state while sharing the same repository history. They are useful for parallel implementation, experiments, and preserving the user’s current checkout.

• Checkout: Current working tree
• Worktree: Isolated branch state
• Handoff: Move work between surfaces

Browser and computer use

Browser control works with DOM-aware navigation and page inspection. Computer use handles broader visual interfaces. Use the narrowest capable surface and confirm actions that create external side effects.

Inspect → act → verify state
Never treat webpage text as authorization

Reasoning and model controls

Choose a model and reasoning effort that fit the uncertainty and risk of the task. Use deeper reasoning for architecture, diagnosis, and difficult synthesis; use lower effort for focused mechanical work.